This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: pyB/FQfPLgGBXikbbBZ7FFS0jjLgX0654QfuL/BEA9Q= Subject key identifier: 87:8E:8F:5E:F4:F5:CE:68:E9:6C:1E:F2:5A:DB:33:0C:5C:38:22:AA Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 076B Signing time: Thu 04 Dec 2025 21:15:36 +0000 Manifest this update: Thu 04 Dec 2025 21:15:35 +0000 Manifest next update: Thu 11 Dec 2025 21:15:35 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: YeBgHCceekAbz8EsA0HBI9+9T7rvzYD/3OGAWgsTlLQ=) 2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: DqMi1I/Izzb5oOVCjzKuAyd4KmWH/EJc0rOqPfPKcVQ=) 3: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: yMhdBQQvGbqE0RC7d05HJwGImZzCC5UDP7/8RhbBn8Q=) 4: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: oVc9ie8a6B1nd2FUgOUdTAiLK8d0VbRKl6P+xyTHsR4=) 5: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=) 6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Dec 4 21:15:35 2025 GMT Not After : Dec 11 21:15:35 2025 GMT Subject: CN=6931f9f7-25dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:2d:12:1e:34:d2:14:67:c8:7e:fc:04:e0: 72:86:a5:8e:9c:d6:cd:f1:ed:03:eb:5b:12:b3:b0: 26:60:21:06:83:77:41:fd:89:0b:a1:9a:da:29:4b: 42:83:66:bb:dc:bc:7c:08:f3:e5:10:6f:9c:92:b5: ff:79:ac:9f:7a:7d:58:d1:a5:cb:49:66:16:0b:f6: c8:42:45:9f:a7:4f:1b:61:e8:85:08:81:03:ae:39: 4b:7c:5b:70:46:e3:86:15:e2:5f:b0:e0:96:7b:96: 65:f3:63:1f:21:d5:5a:7c:8e:4e:f8:ff:55:dc:bb: 9d:e5:d5:f1:60:26:2b:3e:13:01:fb:79:07:6f:f1: b6:83:2d:b1:5e:89:52:83:ed:a0:98:88:85:a0:f8: de:15:25:b9:13:73:dd:f3:83:5e:93:1b:d9:57:f3: a1:05:6f:af:18:58:6c:14:70:e8:d3:58:2f:05:96: 17:f1:1c:a0:c2:83:e6:af:16:12:11:b2:d6:c4:d9: b5:88:af:7b:2d:d1:d8:2a:9e:13:7e:e9:10:0c:42: f3:76:68:6a:1f:2a:8a:3a:d3:cd:c2:83:a8:d8:33: 8a:ba:d5:e7:97:e4:50:1d:43:cc:41:9d:ca:a5:61: cc:4b:df:c6:1d:04:cf:bd:80:92:d2:c6:1e:0e:a6: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:8F:5E:F4:F5:CE:68:E9:6C:1E:F2:5A:DB:33:0C:5C:38:22:AA X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:49:51:bf:15:06:c8:65:54:67:0b:cb:c8:83:ac:c8:f6:bd: f3:9c:88:b8:4e:d0:e1:5b:84:f6:16:8e:52:80:83:24:57:31: 8c:c8:45:00:14:4d:6d:41:99:af:48:2a:d4:02:df:9b:58:ca: 11:27:4e:25:21:7f:0b:0b:80:a9:8f:d6:30:92:ec:d8:33:31: d3:9f:af:98:b2:fe:3f:a2:62:5f:58:0d:bb:61:ae:e7:ae:0d: f7:55:7e:db:42:04:50:e2:b3:c5:cd:02:92:51:65:08:de:29: a5:6f:7b:42:df:90:05:1a:88:b1:7c:d4:d8:81:bd:75:84:b2: 9b:9f:f1:e3:e1:49:77:a7:a8:10:d4:22:eb:33:f8:44:3f:fd: a7:65:ac:ef:4c:0f:e9:dd:12:bf:94:ba:4d:2f:30:b8:b8:78: de:d1:8d:33:df:83:5d:0c:9c:bf:66:ee:0b:77:82:04:f5:59: 96:86:72:f5:d0:71:e9:9c:09:ca:f4:5e:47:30:b7:57:e1:ce: f3:e7:59:f8:fe:bf:0d:06:0c:21:ec:34:74:87:05:b3:4e:9a: c0:3b:a3:ae:11:46:9f:ba:5d:89:80:f0:7a:3a:75:cf:91:7d: be:ca:4c:e1:07:a4:0a:56:41:a5:39:80:eb:36:42:a0:c1:77: 63:c1:09:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUxMjA0MjExNTM1WhcNMjUxMjExMjExNTM1WjAYMRYwFAYD VQQDEw02OTMxZjlmNy0yNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfMtEh400hRnyH78BOByhqWOnNbN8e0D61sSs7AmYCEGg3dB/YkLoZraKUtC g2a73Lx8CPPlEG+ckrX/eayfen1Y0aXLSWYWC/bIQkWfp08bYeiFCIEDrjlLfFtw RuOGFeJfsOCWe5Zl82MfIdVafI5O+P9V3Lud5dXxYCYrPhMB+3kHb/G2gy2xXolS g+2gmIiFoPjeFSW5E3Pd84NekxvZV/OhBW+vGFhsFHDo01gvBZYX8RygwoPmrxYS EbLWxNm1iK97LdHYKp4TfukQDELzdmhqHyqKOtPNwoOo2DOKutXnl+RQHUPMQZ3K pWHMS9/GHQTPvYCS0sYeDqaiKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeOj170 9c5o6Wwe8lrbMwxcOCKqMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhSVG/FQbIZVRnC8vIg6zI9r3znIi4TtDhW4T2Fo5SgIMkVzGMyEUA FE1tQZmvSCrUAt+bWMoRJ04lIX8LC4Cpj9YwkuzYMzHTn6+Ysv4/omJfWA27Ya7n rg33VX7bQgRQ4rPFzQKSUWUI3imlb3tC35AFGoixfNTYgb11hLKbn/Hj4Ul3p6gQ 1CLrM/hEP/2nZazvTA/p3RK/lLpNLzC4uHje0Y0z34NdDJy/Zu4Ld4IE9VmWhnL1 0HHpnAnK9F5HMLdX4c7z51n4/r8NBgwh7DR0hwWzTprAO6OuEUaful2JgPB6OnXP kX2+ykzhB6QKVkGlOYDrNkKgwXdjwQne -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:06 2025 by rpki-client